From 28cd0e4bf51c4f82d0ab231a02403696bb526e60 Mon Sep 17 00:00:00 2001
From: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Date: Thu, 31 Aug 2017 12:07:20 +0300
Subject: [PATCH] Add less verbosity for fernet keys ansible playbook

The default verbosity ended up logging the values of the fernet keys.
This is not desirable, so we set the least amount of verbosity to stop
this.

Change-Id: I38646729692231f305630fc36ef7591a99daff63
Closes-Bug: #1714198
---
 playbooks/rotate-keys.yaml       | 2 ++
 workbooks/fernet-key-rotate.yaml | 1 +
 2 files changed, 3 insertions(+)

diff --git a/playbooks/rotate-keys.yaml b/playbooks/rotate-keys.yaml
index a176cc613..8f4f2242a 100644
--- a/playbooks/rotate-keys.yaml
+++ b/playbooks/rotate-keys.yaml
@@ -24,6 +24,7 @@
           owner: keystone
           group: keystone
         with_dict: "{{ fernet_keys }}"
+        no_log: true
 
       - name: Restart keystone container
         shell: docker restart keystone
@@ -44,6 +45,7 @@
           owner: keystone
           group: keystone
         with_dict: "{{ fernet_keys }}"
+        no_log: true
 
       - name: Reload apache
         service:
diff --git a/workbooks/fernet-key-rotate.yaml b/workbooks/fernet-key-rotate.yaml
index 793791a8e..256c25fdb 100644
--- a/workbooks/fernet-key-rotate.yaml
+++ b/workbooks/fernet-key-rotate.yaml
@@ -53,6 +53,7 @@ workflows:
           inventory: /usr/bin/tripleo-ansible-inventory
           ssh_private_key: <% task(get_privkey).result %>
           ssh_extra_args: '-o StrictHostKeyChecking=no'
+          verbosity: 0
           remote_user: heat-admin
           become: true
           extra_vars: